This policy explains what Navectore collects when you use navectore.ir and the Navectore chart viewer, why, how long it is kept, and what you can ask us to do with it. Navectore is a chart viewer for flight simulation. It is not for real-world navigation.
Who we are
Navectore is run from navectore.ir. For anything to do with your information, write to the contact address shown on this page.
What we collect
Your account
Your email address and username, and your password - stored only as a one-way bcrypt hash, which cannot be turned back into the password. We also record when the account was created, when you last signed in, whether your email address is confirmed, and whether the account has administrator rights.
If you sign in with Google
Google tells us your email address, whether Google has verified it, and a permanent identifier for your Google account. We do not receive your Google password, your contacts, your files or anything else in your Google account.
Confirming your email address
When we send you a confirmation link, we keep a one-way hash of its code until it is used, or for 24 hours at most.
Protecting the sign-in form
When a sign-in fails, we record the IP address, the name that was typed and the time, to slow down anyone guessing passwords. These records are deleted automatically within 24 hours.
Your subscription
The dates of each subscription period, the amount paid, how it was paid and the payment reference. Card payments are made on your bank's payment page, through the Shaparak network: your card number and details are typed there, never on Navectore, and we never see or keep them.
The chart viewer
If you enter a SimBrief username in the chart viewer, it is kept so the viewer can fetch your latest flight plan from SimBrief (simbrief.com).
Navectore Charts
When you sign the Navectore Charts app in to your account, we keep a one-way hash of the key the app signs in with, the name the app gives its computer (for example "Navectore Charts on DESKTOP-1"), and when it was signed in and last used. The app keeps its key on your computer, encrypted for your Windows account. Your dashboard lists every device the app is signed in on, and can sign it out of all of them at once.
Server logs
Like every web server, ours records the IP address, time, requested address and browser type of each request. We use these logs only to keep the service running and secure.
Cookies
Navectore uses one cookie, nv_session. It keeps you signed in and protects our forms against forgery, so it is strictly necessary, and it ends when you sign out. Administrators also get sidebar_state, which only remembers, for a week, whether the admin console's menu is open. The chart viewer at charts.navectore.ir keeps you signed in with a cookie of its own, nc_session, and sets nc_signin for a few minutes while you sign in; both are strictly necessary too. We use no advertising or analytics cookies, and our pages load no scripts, fonts or trackers from other companies.
How we use it
- to create and run your account, and to sign you in;
- to send the emails the account needs, such as the confirmation link;
- to provide the charts, the enroute map and your flight plans;
- to manage your subscription and keep payment records;
- to protect the service from abuse and keep it working.
We do not sell your information, use it for advertising, or build profiles of you.
Google user data
Navectore's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The only Google data we receive is your email address, whether Google has verified it, and your Google account identifier. We use them only to sign you in to Navectore and to connect your Google sign-in to your Navectore account. We do not share them with anyone, do not use them for advertising, and do not use them to train artificial intelligence or machine-learning models.
You can disconnect Navectore at any time in your Google Account, under Security › Your connections to third-party apps & services.
Who else receives information
- your bank and the Shaparak payment network, when you pay;
- the email service that delivers our messages to you;
- Google, when you choose to sign in with Google;
- SimBrief, when the chart viewer fetches your flight plan;
- authorities, where the law requires it.
Nobody else. We never sell or rent personal information.
Where it is kept and how it is protected
Your information is kept on our own server. The site is only served over encrypted HTTPS connections, passwords are stored as bcrypt hashes, only administrators can open account records, and every change an administrator makes to an account is logged.
How long we keep it
- Your account: for as long as it exists. When you ask us to delete it, we do so within 30 days.
- Failed sign-in records: 24 hours at most.
- Email confirmation codes: 24 hours at most.
- Navectore Charts sign-ins: until you sign the app out, or 60 days after it was last used.
- Payment records: as long as accounting and tax law requires, even after the account is deleted.
- Server logs: only as long as they are needed to keep the service running and secure.
Your choices
- See your account details and subscription history in your dashboard.
- Change your password there at any time.
- Ask us for a copy of your information, to correct it, or to delete your account - write to the contact address shown on this page from the address on your account.
- Disconnect Google sign-in from your Google Account at any time.
Children
Navectore is not aimed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, write to us and we will delete it.
Changes to this policy
If this policy changes, we will update the date at the top of this page, and announce significant changes on the site before they take effect.
Contact
Write to the contact address shown on this page.